Projekte/web-base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

static view fix

Browse Source
This commit is contained in:
Roman Hergenreder 2020-06-22 19:12:14 +02:00
parent eb04206989
commit b8955aabd1
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
core/core.php
View File

@ -93,7 +93,7 @@ function createError($msg) {
return json_encode(array("success" => false, "msg" => $msg)); return json_encode(array("success" => false, "msg" => $msg));
} }
function serveStatic(string $webRoot, string $file): string { function serveStatic(string $webRoot, string $file) {
$path = realpath($webRoot . "/" . $file); $path = realpath($webRoot . "/" . $file);
if (!startsWith($path, $webRoot . "/")) { if (!startsWith($path, $webRoot . "/")) {
@ -106,7 +106,7 @@ function serveStatic(string $webRoot, string $file): string {
return "<b>Unable to read file:</b> " . htmlspecialchars($path); return "<b>Unable to read file:</b> " . htmlspecialchars($path);
} }
$pathInfo = pathinfo($file); $pathInfo = pathinfo($path);
// maybe I will allow more later… // maybe I will allow more later…
$allowedExtension = array("html", "htm"); $allowedExtension = array("html", "htm");
@ -116,7 +116,7 @@ function serveStatic(string $webRoot, string $file): string {
return "<b>Access restricted:</b> Extension '" . htmlspecialchars($ext) . "' not allowed."; return "<b>Access restricted:</b> Extension '" . htmlspecialchars($ext) . "' not allowed.";
} }
$mimeType = mime_content_type($file); $mimeType = mime_content_type($path);
header("Content-Type: $mimeType"); header("Content-Type: $mimeType");
return readfile($file); readfile($path);
} }